CISO, Fintech AI & Cloud Security Leader

Achieve; Tempe (AZ); Hybrid; USD 275,000 - 305,000; Full time

Benefits offered by this job

401(k) with employer match

Medical, dental, vision

Paid time off

Equity/bonus potential

Hybrid work options in multiple metros

Job summary

Achieve is seeking a Chief Information Security Officer (CISO) to establish and execute a mature, risk-based security program for a high-growth fintech company. You will partner across technology, product, legal, compliance, and operations to protect customer trust, enable secure innovation, and scale security to meet regulatory expectations and investor scrutiny.

The role leads governance, risk, and compliance activities across frameworks such as PCI DSS 4.0, SOC 2, NIST CSF, and ISO 27001,

Qualifications

• 12+ years of progressive cybersecurity leadership experience, including CISO or equivalent.
• Experience in fintech, financial services, or highly regulated environments.
• Technical expertise in cloud security, IAM, and modern attack vectors.
• Familiarity with PCI DSS 4.0, SOC 2, NIST CSF, ISO 27001, GLBA.

Responsibilities

• Define and execute a multi-year, enterprise-wide cybersecurity strategy aligned with business objectives.
• Serve as trusted security advisor to executive leadership, Board, regulators, and partners.
• Translate cyber risk into business impact with a risk-based security organization.
• Oversee SOC, incident response, cloud security posture, and DevSecOps integration.
• Lead AI security governance and innovation strategy with risk controls.

Skills

Executive leadership

Cloud security architecture

DevSecOps

IAM

AI risk management

Regulatory compliance

Security governance

Communication with boards

Tools

PCI DSS 4.0

SOC 2

NIST CSF

ISO 27001

GLBA

Job description

Achieve is seeking a Chief Information Security Officer (CISO) to establish and execute a mature, risk-based security program for a high-growth fintech company. You will partner across technology, product, legal, compliance, and operations to protect customer trust, enable secure innovation, and scale security to meet regulatory expectations and investor scrutiny.

The role leads governance, risk, and compliance activities across frameworks such as PCI DSS 4.0, SOC 2, NIST CSF, and ISO 27001,